Privacy policy — TrustArc

Cited by

Facts read from this source

• Entity Report an error

  “TrustArc is a technology-powered privacy solutions company headquartered at 2121 N. California Blvd., Suite 290, Walnut Creek, CA, USA.”

• Subsidiaries Report an error

  “TrustArc also operates through its subsidiaries: TrustArc Canada Inc. (formerly Nymity Inc.), TRUSTe Europe Ltd. in the UK, TRUSTe Web Services Technologies, Inc. in the Philippines, and TRUSTe LLC in the USA.”

• Dpf certification Report an error

  “TrustArc Inc and its subsidiary TRUSTe LLC comply with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF), as set forth by the U.S. Department of Commerce.”

• Ftc jurisdiction Report an error

  “TrustArc is subject to the investigatory and enforcement powers of the U.S. Federal Trade Commission (FTC) and is liable under the DPF Principles if our service providers process personal information in a manner inconsistent with those Principles.”

• SOC 2 Report an error

  “Our information security program is independently assessed annually in accordance with SOC 2 Type II standards established by the AICPA.”

• Penetration testing Report an error

  “We also engage qualified third-party providers to conduct annual comprehensive penetration testing of applicable systems.”

• GDPR CCPA lgpd Report an error

  “We maintain a comprehensive data protection program designed to ensure personal information is handled in accordance with applicable privacy laws, including the GDPR, CCPA, and LGPD.”

• Retention customer data Report an error

  “We retain it for the duration of the customer contract, and delete it as required by the customer or within an agreed timeframe (generally three years from the date of contract termination).”

• Recording retention Report an error

  “All recorded meetings are automatically deleted within 180 days.”

• Access right frequency Report an error

  “Depending on your residency, you may request access free of charge, twice per year, to information collected in the last 12 months — or for a longer period, provided it was collected on or after January 1, 2022.”

• Privacy contact Report an error

  “To submit a request or exercise any such rights, you may use our Individual Rights Manager form, by emailing privacy@trustarc.com, or by contacting us via telephone.”

• Optout phone Report an error

  “You may opt out by submitting the Do Not Sell or Share My Personal Information form, using the "Do Not Sell or Share My Personal Information" link at the bottom of our website, or by emailing privacy@trustarc.com or calling 1-866-I-OPT-OUT (467-8688), service code 751.”

• AI features no training Report an error

  “We don't use your data for AI model training or improvement: AI services within TrustArc solutions are opted out of LLM training by default and process data only to generate responses for authenticated users within the TrustArc environment.”

• AI provider change notice Report an error

  “Where a change in AI service provider materially affects your data processing, TrustArc will provide at least 30 days' advance notice.”

• Gpc support Report an error

  “We support the Global Privacy Control (GPC) opt-out signal. If you have enabled GPC in a supported browser or extension, we will treat it as a valid opt-out request under applicable privacy laws.”

• Recaptcha Report an error

  “We use the Google reCAPTCHA v3 service on our website to prevent spam and abuse.”

• List reference Report an error

  “Some of these providers qualify as "sub-processors" under the GDPR, as they are engaged in the provision of services our customers have contracted with us to deliver. View a list of our sub-processors.”

• No sale for money Report an error

  “We do not sell personal information in exchange for monetary or other valuable consideration.”

• No sale under18 Report an error

  “We do not knowingly sell or share the personal information of individuals under 18 years of age, nor use it for advertising purposes.”

Scores citing this record

• Dp Ciso Data protection management depth
• Dp Ciso Information security management depth
• Dp Ciso Framework & standard coverage
• Dp Ciso Audit readiness & evidence
• Dp Ciso Integrations & automation
• Dp Ciso European sovereignty
• Dp Ciso Data protection management depth
• Dp Ciso Information security management depth
• Dp Ciso Framework & standard coverage
• Dp Ciso Integrations & automation
• Dp Ciso European sovereignty
• Dp Ciso Data protection management depth
• Dp Ciso Information security management depth
• Dp Ciso Framework & standard coverage
• Dp Ciso Integrations & automation
• Dp Ciso European sovereignty
• The Drafted Generalist Data protection management depth
• The Drafted Generalist Information security management depth
• The Drafted Generalist Framework & standard coverage
• The Drafted Generalist Integrations & automation
• The Drafted Generalist European sovereignty
• The Drafted Generalist Data protection management depth
• The Drafted Generalist Information security management depth
• The Drafted Generalist Framework & standard coverage
• The Drafted Generalist Integrations & automation
• The Drafted Generalist European sovereignty
• The Drafted Generalist Data protection management depth
• The Drafted Generalist Information security management depth
• The Drafted Generalist Framework & standard coverage
• The Drafted Generalist Audit readiness & evidence
• The Drafted Generalist Integrations & automation
• The Drafted Generalist European sovereignty
• The Drafted Generalist Records & DPIA depth
• The Drafted Generalist Data subject rights & incidents
• The Drafted Generalist Privacy regime coverage
• The Drafted Generalist Audit readiness & evidence
• The Drafted Generalist Integrations & automation
• The Drafted Generalist European sovereignty
• The Drafted Generalist Records & DPIA depth
• The Drafted Generalist Data subject rights & incidents
• The Drafted Generalist Privacy regime coverage
• The Drafted Generalist Audit readiness & evidence
• The Drafted Generalist Integrations & automation
• The Drafted Generalist European sovereignty
• The Drafted Generalist Records & DPIA depth
• The Drafted Generalist Data subject rights & incidents
• The Drafted Generalist Privacy regime coverage
• The Drafted Generalist Audit readiness & evidence
• The Drafted Generalist European sovereignty
• The Drafted Generalist Data subject rights & incidents
• The Drafted Generalist Privacy regime coverage
• The Drafted Generalist Audit readiness & evidence
• The Drafted Generalist Integrations & automation
• The Drafted Generalist European sovereignty
• The Drafted Generalist Data subject rights & incidents
• The Drafted Generalist Privacy regime coverage
• The Drafted Generalist Audit readiness & evidence
• The Drafted Generalist European sovereignty
• The Drafted Generalist Data subject rights & incidents
• The Drafted Generalist European sovereignty
• The External DPO Data protection management depth
• The External DPO Information security management depth
• The External DPO Framework & standard coverage
• The External DPO Audit readiness & evidence
• The External DPO Integrations & automation
• The External DPO European sovereignty
• The External DPO Data protection management depth
• The External DPO Information security management depth
• The External DPO Framework & standard coverage
• The External DPO Integrations & automation
• The External DPO European sovereignty
• The External DPO Pricing transparency
• The External DPO Data subject rights & incidents
• The External DPO Privacy regime coverage
• The External DPO Audit readiness & evidence
• The External DPO European sovereignty
• The External DPO Data subject rights & incidents
• The External DPO Privacy regime coverage
• The External DPO Audit readiness & evidence
• The External DPO Integrations & automation
• The External DPO European sovereignty
• The External DPO Records & DPIA depth
• The External DPO Data subject rights & incidents
• The External DPO Privacy regime coverage
• The External DPO Audit readiness & evidence
• The External DPO European sovereignty
• The External DPO Data subject rights & incidents
• The External DPO Privacy regime coverage
• The External DPO Audit readiness & evidence
• The External DPO Integrations & automation
• The External DPO European sovereignty
• The External DPO Data subject rights & incidents
• The External DPO European sovereignty
• The In-House Counsel Records & DPIA depth
• The In-House Counsel Data subject rights & incidents
• The In-House Counsel Privacy regime coverage
• The In-House Counsel Audit readiness & evidence
• The In-House Counsel Integrations & automation
• The In-House Counsel European sovereignty
• The In-House Counsel Records & DPIA depth
• The In-House Counsel Data subject rights & incidents
• The In-House Counsel Privacy regime coverage
• The In-House Counsel Audit readiness & evidence
• The In-House Counsel European sovereignty
• The In-House Counsel Data subject rights & incidents
• The In-House Counsel Privacy regime coverage
• The In-House Counsel Audit readiness & evidence
• The In-House Counsel European sovereignty
• The In-House Counsel Data subject rights & incidents
• The In-House Counsel Privacy regime coverage
• The In-House Counsel Audit readiness & evidence
• The In-House Counsel Integrations & automation
• The In-House Counsel European sovereignty
• The In-House Counsel Data subject rights & incidents
• The In-House Counsel European sovereignty
• The IT Integrator Data protection management depth
• The IT Integrator Information security management depth
• The IT Integrator Framework & standard coverage
• The IT Integrator Audit readiness & evidence
• The IT Integrator Integrations & automation
• The IT Integrator European sovereignty
• The IT Integrator Data protection management depth
• The IT Integrator Information security management depth
• The IT Integrator Framework & standard coverage
• The IT Integrator Integrations & automation
• The IT Integrator European sovereignty
• The IT Integrator Records & DPIA depth
• The IT Integrator Data subject rights & incidents
• The IT Integrator Privacy regime coverage
• The IT Integrator Audit readiness & evidence
• The IT Integrator European sovereignty
• The IT Integrator Records & DPIA depth
• The IT Integrator Data subject rights & incidents
• The IT Integrator Privacy regime coverage
• The IT Integrator Audit readiness & evidence
• The IT Integrator Integrations & automation
• The IT Integrator European sovereignty
• The IT Integrator Data subject rights & incidents
• The IT Integrator Privacy regime coverage
• The IT Integrator Audit readiness & evidence
• The IT Integrator European sovereignty
• The IT Integrator Data subject rights & incidents
• The IT Integrator Privacy regime coverage
• The IT Integrator Audit readiness & evidence
• The IT Integrator Integrations & automation
• The IT Integrator European sovereignty
• The IT Integrator Data subject rights & incidents
• The IT Integrator Privacy regime coverage
• The IT Integrator Audit readiness & evidence
• The IT Integrator Integrations & automation
• The IT Integrator European sovereignty
• The IT Integrator Data subject rights & incidents
• The IT Integrator European sovereignty
• The Lead Auditor Pricing transparency
• The Lead Auditor Data protection management depth
• The Lead Auditor Information security management depth
• The Lead Auditor Framework & standard coverage
• The Lead Auditor Audit readiness & evidence
• The Lead Auditor Integrations & automation
• The Lead Auditor European sovereignty
• The Lead Auditor Data protection management depth
• The Lead Auditor Information security management depth
• The Lead Auditor Framework & standard coverage
• The Lead Auditor Integrations & automation
• The Lead Auditor European sovereignty
• The Lead Auditor Records & DPIA depth
• The Lead Auditor Data subject rights & incidents
• The Lead Auditor Privacy regime coverage
• The Lead Auditor Audit readiness & evidence
• The Lead Auditor Integrations & automation
• The Lead Auditor European sovereignty
• The Lead Auditor Records & DPIA depth
• The Lead Auditor Data subject rights & incidents
• The Lead Auditor Privacy regime coverage
• The Lead Auditor Audit readiness & evidence
• The Lead Auditor Integrations & automation
• The Lead Auditor European sovereignty
• The Lead Auditor Records & DPIA depth
• The Lead Auditor Data subject rights & incidents
• The Lead Auditor Privacy regime coverage
• The Lead Auditor Audit readiness & evidence
• The Lead Auditor Integrations & automation
• The Lead Auditor European sovereignty
• The Lead Auditor Data subject rights & incidents
• The Lead Auditor Privacy regime coverage
• The Lead Auditor Audit readiness & evidence
• The Lead Auditor Integrations & automation
• The Lead Auditor European sovereignty
• The Lead Auditor Data subject rights & incidents
• The Lead Auditor Privacy regime coverage
• The Lead Auditor Audit readiness & evidence
• The Lead Auditor Integrations & automation
• The Lead Auditor European sovereignty
• The Lead Auditor Data subject rights & incidents
• The Lead Auditor European sovereignty
• The Skeptic Pricing transparency
• The Skeptic Data protection management depth
• The Skeptic Information security management depth
• The Skeptic Framework & standard coverage
• The Skeptic Integrations & automation
• The Skeptic European sovereignty
• The Skeptic Data protection management depth
• The Skeptic Information security management depth
• The Skeptic Framework & standard coverage
• The Skeptic Audit readiness & evidence
• The Skeptic Integrations & automation
• The Skeptic European sovereignty
• The Skeptic Data protection management depth
• The Skeptic Information security management depth
• The Skeptic Framework & standard coverage
• The Skeptic Audit readiness & evidence
• The Skeptic Integrations & automation
• The Skeptic European sovereignty
• The Skeptic Records & DPIA depth
• The Skeptic Data subject rights & incidents
• The Skeptic Privacy regime coverage
• The Skeptic Audit readiness & evidence
• The Skeptic Integrations & automation
• The Skeptic European sovereignty
• The Skeptic Records & DPIA depth
• The Skeptic Data subject rights & incidents
• The Skeptic Privacy regime coverage
• The Skeptic Audit readiness & evidence
• The Skeptic Integrations & automation
• The Skeptic European sovereignty
• The Skeptic Records & DPIA depth
• The Skeptic Data subject rights & incidents
• The Skeptic Privacy regime coverage
• The Skeptic Audit readiness & evidence
• The Skeptic Integrations & automation
• The Skeptic European sovereignty
• The Skeptic Data subject rights & incidents
• The Skeptic Privacy regime coverage
• The Skeptic Audit readiness & evidence
• The Skeptic European sovereignty
• The Skeptic Data subject rights & incidents
• The Skeptic Privacy regime coverage
• The Skeptic Audit readiness & evidence
• The Skeptic European sovereignty
• The Skeptic Data subject rights & incidents
• The Skeptic Privacy regime coverage
• The Skeptic European sovereignty